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Claim Amendments: ^ ^ 

1 . (original) A system for authenticating a product via the Intemet comprising: 
a non-contact tag embedded as an authentication device in a product to be authenticated, 

said non-contact tag having a specific ID known only to an administrator of said product 

authentication system, and said ID being stored in a body of said non-contact tag as electronic 

data; 

a reader for reading ID data of said non-contact tag, said reader having a specific ID 
known only to said administrator of said product authentication system, said ID being stored in a 
body of said reader as electronic data, and said reader having means for connecting to the 
Intemet for communication; 

a database for storing said ID data and attributes data of said non-contact tag, product 
inforaiation data of said product having said non-contact tag embedded therein, and said ID data 
and attribute information data of said reader, said database having means for connecting to the 
Intemet for communication; 

a data server for reading data stored in said database and for writing data into said 
database, said data server having means for connecting to the Intemet for communication; 

an authentication server for checking said ID data of said reader and said ID data of said 
non-contact tag sent from said reader connected to the Intemet against data stored in said 
database to authenticate said reader and said non-contact tag, said authentication server having 
means for connecting to the Intemet for communication, 

said product authentication system further comprising: 
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means for, prior to distribution of said non-contact tag and said reader to a user of said 
product authentication system, making said data server read said ID data of said non-contact tag 
and said ID data of said reader, create data files thereof, and store said data files in said database; 

means for, subsequent to the distribution of said non-contact tag and said reader to said 
user of said product authentication system, making said reader connected to the Internet send its 
own ID data to said authentication server, and making said authentication server check said 
received ID data of said reader against said data file of said reader stored in said database; 

means for making said authentication server notify said reader checked against said 
identical ID data that said reader is authenticated, and urge said reader to send said ID data of 
said non-contact tag embedded in said product; 

means for making said authenticated reader read said ID data of said non-contact tag 
embedded in said product and send said ID data to said authentication server, and making said 
authentication server check said received ID data of said non-contact tag against said data file of 
said non-contact tag stored in said database; and 

means for making said authentication server notify said reader which sent said ID data of 
said non-contact tag that said non-contact tag checked against said identical ID data is 
authenticated. 

2. (original) The product authentication system as defined in claim 1, wherein said 
product authentication system is administered and operated by an application service provider 
(ASP) to provide product authentication service via the Internet in an ASP system. 
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3. (currently amended) A product authentication system as defined in claim 1 of^, 
wherein said product authentication system is a product authentication system where the side of 
said user is made to have a double ID by assigning to said user of said reader a specific password 
known only to said administrator and said user of said reader, said product authentication system 
comprising: 

means for making said data server read data of said assigned password, create a data file 
thereof as attribute information related to said ID data of said distributed reader, and store said 
data file in said database; 

means for, after said reader is notified of its authentication, making said authentication 
server request input of said password of said user, receive password data inputted and sent fi-om 
a terminal of said user, and check said password data against said data file stored in said 
database; and 

means for making said authentication server notify said user terminal which sent said 
password data that said password checked against said identical password data is authenticated. 

4. (currently amended) A product authentication system as claimed in any on e of 
claims claim 1 te-S^, comprising: 

means for making said reader and said user terminal distributed to the manufacturer of 
the product who is said user of said product authentication system send to said data server 
product information data such as the name, the model, the date of manufacture, and the place of 
manufacture of said product, said product information data being related to said ID data of said 
non-contact tag; and 
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means for making said data server receive said product information data and create a data 
file as attribute information related to said ID data of said embedded non-contact tag, and store 
said data file in said database. 

5. (currently amended) A product authentication system as claimed in any on e of 
claims claim 1 further comprising: 

means for making a manufacturer of said non-contact tag create a data file where said ID 
of said non-contact tag is related to said manufacturer of said product who is a supplier of said 
non-contact tag, and send said data file to said data server; 

means for making said data server receive said data file and store said data file in said 
database; and 

means for making said authentication server receive said ID data of said non-contact tag 
sent from said reader, and check whether said ID is related to said supplier in said data file of 
said non-contact tag stored in said database. 

6. (original) A system for authenticating a product via the Intemet comprising: 

a non-contact tag embedded as an authentication device in a product to be authenticated, 
said non-contact tag having a specific ID known only to an administrator of said product 
authentication system, and said ID being stored in a body of said non-contact tag as electronic 
data; 

a reader for reading ED data of said non-contact tag, said reader having a specific ID 
known only to said administrator of said product authentication system, said ID being stored in a 
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body of said reader as electronic data, and said reader having means for connecting to the 
Internet for communication; 

a database for storing said ED data and attributes data of said non-contact tag, product 
information data of said product having said non-contact tag embedded therein, and said ED data 
and attribute information data of said reader, said database having means for connecting to the 
Intemet for communication; 

a data server for reading data stored in said database and for writing data into said 
database, said data server having means for connecting to the Intemet for communication; 

an authentication server for checking said ID data of said reader and said ID data of said 
non-contact tag sent from said reader connected to the Intemet against data stored in said 
database to authenticate said reader and said non-contact tag, said authentication server having 
means for connecting to the Intemet for communication, 

wherein said product authentication system is administered and operated by an 
application service provider (ASP) to provide product authentication service via the Intemet in 
an ASP system. 
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